Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/9580A702548211EFAADB996FC4F9AE02.roa
File: 9580A702548211EFAADB996FC4F9AE02.roa (raw, json)
Hash identifier: bUq+3W02lE1dY/rsndFfjUdc4yRLRj5puR7YHObIsuU=
Subject key identifier: 8C:2C:03:93:C0:25:25:86:C8:51:D8:58:F3:03:CE:FD:4C:1B:66:E4
Certificate issuer: /CN=A917B520/serialNumber=380CD6BCC9E1C11FEC4EE27DA893824DADB5212A
Certificate serial: 70
Authority key identifier: 38:0C:D6:BC:C9:E1:C1:1F:EC:4E:E2:7D:A8:93:82:4D:AD:B5:21:2A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OAzWvMnhwR_sTuJ9qJOCTa21ISo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/9580A702548211EFAADB996FC4F9AE02.roa
Signing time: Tue 17 Dec 2024 09:49:43 +0000
ROA not before: Tue 17 Dec 2024 09:49:43 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 150436
IP address blocks: 45.78.192.0/18 maxlen: 24
207.166.160.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112 (0x70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917B520/serialNumber=380CD6BCC9E1C11FEC4EE27DA893824DADB5212A
Validity
Not Before: Dec 17 09:49:43 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=67614936-c565
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a1:83:21:67:2b:aa:17:7f:98:8e:a3:13:f5:
8e:fb:17:0b:f2:92:fd:0f:9c:0f:4e:84:c1:e0:c7:
fd:a0:78:9e:4b:ba:d9:27:26:60:23:d5:8a:a0:98:
47:26:48:0b:a6:64:8f:3f:74:3b:5d:ab:05:9f:7b:
cc:e5:0b:05:bd:cc:11:f6:31:cc:3e:30:09:9d:58:
eb:c0:88:f6:5d:c7:3b:33:e1:04:2e:ac:a2:a0:8f:
72:d0:76:a4:11:7d:6c:71:b0:19:ec:53:b6:3c:9d:
a7:36:4b:dc:5d:d0:19:00:93:5c:93:f0:87:79:e8:
bb:50:aa:8a:5a:64:5b:0e:35:98:29:e7:44:af:d7:
af:e7:35:a7:51:b4:a4:98:84:e2:b0:a2:81:b8:06:
06:b7:c1:1d:0b:29:6d:ac:f0:85:db:e1:26:d3:25:
b4:51:8d:3b:56:5e:c9:41:a7:51:5c:12:af:44:4d:
4c:cc:f1:5c:da:4c:8a:09:4d:cf:cb:35:b3:e2:43:
96:0e:87:00:4b:95:bd:8d:cc:78:cc:8b:bc:11:ba:
8e:0f:8c:b9:f0:41:c9:5a:7f:74:23:98:62:bc:3c:
b1:06:d1:15:03:b9:6e:fd:f7:ec:2d:39:10:c9:c7:
a4:7b:11:3b:b7:15:c5:0a:e4:c7:0c:d6:5c:cc:62:
21:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:2C:03:93:C0:25:25:86:C8:51:D8:58:F3:03:CE:FD:4C:1B:66:E4
X509v3 Authority Key Identifier:
keyid:38:0C:D6:BC:C9:E1:C1:1F:EC:4E:E2:7D:A8:93:82:4D:AD:B5:21:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/OAzWvMnhwR_sTuJ9qJOCTa21ISo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OAzWvMnhwR_sTuJ9qJOCTa21ISo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B520/8F9091D432B011EFA4CBF96AC4F9AE02/9580A702548211EFAADB996FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.78.192.0/18
207.166.160.0/19
Signature Algorithm: sha256WithRSAEncryption
4b:07:0a:98:7f:95:2d:29:f1:19:21:f5:7f:ad:a1:ae:ea:ae:
77:ec:00:f6:f0:4d:d6:83:a5:bc:c3:8f:88:e8:dd:97:a7:78:
63:c7:25:ff:aa:9a:c1:db:4c:e6:e5:86:45:ec:ff:61:ad:20:
dc:93:f0:2c:5e:c6:10:6f:69:4d:15:41:eb:0d:e8:3d:4a:fd:
60:db:9f:87:6a:44:74:9d:d1:78:47:35:b1:e2:76:75:eb:1d:
64:46:9c:de:c3:7f:ff:12:bc:cc:51:42:cd:17:91:1a:c5:73:
c1:f1:fd:15:ff:1c:12:a2:e1:b8:fb:6f:c8:fd:1f:a2:54:20:
d9:d2:1c:07:97:ae:aa:de:43:29:a7:93:d4:e4:43:75:83:0a:
da:71:3c:28:ec:8b:2b:2d:4e:9e:7b:41:e2:f6:fd:08:4e:b3:
e9:5b:28:8d:6e:12:b1:d5:21:8d:59:32:e2:49:29:d5:f3:30:
e8:df:82:90:b5:e9:b1:b6:dc:a9:0e:2b:0c:34:fe:01:4c:7e:
99:9b:9e:ec:d4:73:23:61:29:8d:9a:ce:68:16:8a:67:93:24:
2f:e2:24:38:8a:ad:cd:d0:1b:f8:02:db:b1:44:0a:a5:5c:0f:
31:bd:8e:07:39:48:03:79:65:5e:5a:ce:70:b7:ce:f6:25:13:
97:1f:c9:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:38:16 2025 by rpki-client